프로그램분석

[CatUtilService] Install log : 85ms / 2013-02-18

프로세스 천국 2013. 2. 18. 23:18

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 1,023.55 MB
Intel64 Family 6 Model 37 Stepping 5
Date : 2013-02-18
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\AdMatching\AdMatching.exe
DF001 C:\Program Files (x86)\AdMatching\admsys.exe
DF002 C:\Program Files (x86)\CatUtil\adInstall_ad030.exe
DF003 C:\Program Files (x86)\CatUtil\CatUtilDown.exe
DF004 C:\Program Files (x86)\CatUtil\CatUtilService.exe
DF005 C:\Program Files (x86)\CatUtil\smartwinkey_cat.exe
DF006 C:\Program Files (x86)\CatUtil\windowfastsetup_cat.exe
DF007 C:\Program Files (x86)\smartwinkey\smartwinkey.exe
DF008 C:\Program Files (x86)\windowfast\uninst_windowfast.exe
DF009 C:\Program Files (x86)\windowfast\windowfast.exe
DF010 C:\Program Files (x86)\windowfast\windowfastEngine.exe
DF011 C:\Program Files (x86)\windowfast\windowfastse.exe
DF012 C:\Program Files (x86)\windowfast\windowfastU.exe
DF013 C:\ProgramData\Microsoft\Windows\Templates\CatUtilDown_.exe
DF014 C:\Users\Administrator\AppData\Local\Temp\8791\AdMatching.exe
DF015 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\windowfast\Homepage.url
DF016 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\windowfast\windowfast 삭제.lnk
DF017 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\windowfast\windowfast.lnk
DF018 C:\Windows\conditioninforeset.exe
DF019 C:\Windows\SysWOW64\remover.exe
----------------------------------------------------------------------
SC020 windowfast Update Service -/- windowfast Support Service -/- - -/-  -/- "C:\Windows\conditioninforeset.exe" /update
SC021 windowfastService -/- windowfast Service -/- - -/-  -/- C:\Program Files (x86)\windowfast\windowfastse.exe
----------------------------------------------------------------------
UN022 캣유틸 -/- MediaSave -/- CatUtil -/- - -/- -
UN023 conditioninforeset -/- - -/- conditioninforeset -/- hxxp://windowfast.co.kr -/- hxxp://windowfast.co.kr
UN024 windows smart key -/- windows smart key -/- uninstall_smartwinkey.exe -/- - -/-
UN025 windowfast -/- UCF -/- windowfast -/- hxxp://www.windowfast.co.kr -/- hxxp://www.windowfast.co.kr
UN026 KCW Ad Matching -/- Korea Contents Network, Inc. -/- {51632293-CBB6-47bc-9244-73C44C8516A6}_is1 -/- hxxp://www.admatching.co.kr/ -/- hxxp://www.admatching.co.kr/
TS027 windows smart key
----------------------------------------------------------------------
US028 admsys -/- C:\Program Files (x86)\AdMatching\admsys.exe
US029 AdMatching -/- C:\Program Files (x86)\AdMatching\AdMatching.exe
LS030 CatUtilService -/- C:\Program Files (x86)\CatUtil\CatUtilService.exe run
LS031 smartwinkey.exe -/- C:\Program Files (x86)\smartwinkey\smartwinkey.exe
LS032 AdMatching -/- C:\Program Files (x86)\AdMatching\AdMatching.exe /byboot
LS033 admsys -/- C:\Program Files (x86)\AdMatching\admsys.exe
----------------------------------------------------------------------
----------------------------------------------------------------------
Deleted Files : 20
Remove Service : 2
Remove Uninstall Entry : 5
Remove Startup Entry : 6
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2013-02-18
[01-HKCUREG]**admsys
[01-HKCUREG]**AdMatching
[02-HKLMREG]**CatUtilService
[02-HKLMREG]**smartwinkey.exe
[02-HKLMREG]**AdMatching
[02-HKLMREG]**admsys
[05-SERVICE]**windowfast Update Service
[05-SERVICE]**windowfastService
----------------------------------------------------------------------
Total Processing Time : 85ms
----------------------------------------------------------------------
NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "smartwinkey" & echo windowdel.com
NA006 echo windowexe.com & tskill "CatUtilService" & echo windowdel.com
NA007 echo windowexe.com & tskill "admsys" & echo windowdel.com
NA008 echo windowexe.com & tskill "AdMatching" & echo windowdel.com
NA009 echo windowexe.com & tskill "smartwinkey" & echo windowdel.com
NA010 echo windowexe.com & tskill "CatUtilService" & echo windowdel.com
NA011 echo windowexe.com & tskill "admsys" & echo windowdel.com
NA012 echo windowexe.com & tskill "AdMatching" & echo windowdel.com
NA013 echo windowexe.com & tskill "windowfastU" & echo windowdel.com
NA014 echo windowexe.com & tskill "windowfastse" & echo windowdel.com
NA015 echo windowexe.com & tskill "windowfastse" & echo windowdel.com
NA016 echo windowexe.com & tskill "windowfastEngine" & echo windowdel.com
NA017 echo windowexe.com & tskill "windowfast" & echo windowdel.com
NA018 echo windowexe.com & tskill "windowfast" & echo windowdel.com
NA019 echo windowexe.com & tskill "conditioninforeset" & echo windowdel.com
NA020 echo windowexe.com & tskill "conditioninforeset" & echo windowdel.com
NA021 echo windowexe.com & tskill "CatUtilDown" & echo windowdel.com
NA022 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA023 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA024 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA025 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA026 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "smartwinkey.exe" /f
NA027 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "smartwinkey.exe" /f
NA028 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "CatUtilService" /f
NA029 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "CatUtilService" /f
NA030 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA031 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA032 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA033 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA034 sc stop "windowfastService"
NA035 echo Service Disable & sc config "windowfastService" start= disabled & echo Windowexe.com
NA036 sc stop "windowfast Update Service"
NA037 echo Service Disable & sc config "windowfast Update Service" start= disabled & echo Windowexe.com
NA038 echo schtasks Delete & schtasks /delete /tn "windows smart key" /f
NA039 echo Created by Windowexe.com
NA040 echo change dir for x64
NA041 cd %windir%
NA042 cd syswow64
NA043 echo windowexe.com & tskill "smartwinkey" & echo windowdel.com
NA044 echo windowexe.com & tskill "CatUtilService" & echo windowdel.com
NA045 echo windowexe.com & tskill "admsys" & echo windowdel.com
NA046 echo windowexe.com & tskill "AdMatching" & echo windowdel.com
NA047 echo windowexe.com & tskill "smartwinkey" & echo windowdel.com
NA048 echo windowexe.com & tskill "CatUtilService" & echo windowdel.com
NA049 echo windowexe.com & tskill "admsys" & echo windowdel.com
NA050 echo windowexe.com & tskill "AdMatching" & echo windowdel.com
NA051 echo windowexe.com & tskill "windowfastU" & echo windowdel.com
NA052 echo windowexe.com & tskill "windowfastse" & echo windowdel.com
NA053 echo windowexe.com & tskill "windowfastse" & echo windowdel.com
NA054 echo windowexe.com & tskill "windowfastEngine" & echo windowdel.com
NA055 echo windowexe.com & tskill "windowfast" & echo windowdel.com
NA056 echo windowexe.com & tskill "windowfast" & echo windowdel.com
NA057 echo windowexe.com & tskill "conditioninforeset" & echo windowdel.com
NA058 echo windowexe.com & tskill "conditioninforeset" & echo windowdel.com
NA059 echo windowexe.com & tskill "CatUtilDown" & echo windowdel.com
NA060 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA061 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA062 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA063 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA064 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "smartwinkey.exe" /f
NA065 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "smartwinkey.exe" /f
NA066 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "CatUtilService" /f
NA067 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "CatUtilService" /f
NA068 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA069 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AdMatching" /f
NA070 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA071 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "admsys" /f
NA072 sc stop "windowfastService"
NA073 echo Service Disable & sc config "windowfastService" start= disabled & echo Windowexe.com
NA074 sc stop "windowfast Update Service"
NA075 echo Service Disable & sc config "windowfast Update Service" start= disabled & echo Windowexe.com
NA076 echo schtasks Delete & schtasks /delete /tn "windows smart key" /f
NA077 echo Created by Windowexe.com
NA078 echo End
NA079 ======================================================================
NA080 echo Created by Windowexe.com / do not delete this label.
NA081 ======================================================================